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Abstract. In 5. , van den Dries showed that the theory of the reals with a 
predicate for the integer powers of two admits quantifier elimination in an ex- 
panded language, and is hence decidable. He gave a model-theoretic argument, 
which provides no apparent bounds on the complexity of a decision procedure. 
We provide a syntactic argument that yields a procedure that is primitive re- 
cursive, although not elementary. In particular, we show that it is possible to 
eliminate a single block of existential quantifiers in time > where n is the 

length of the input formula and 2^ denotes fc-fold iterated exponentiation. 

1. Introduction 

Consider the theory of real closed fields, in a language with 0, 1, +, — , x , <. 
Extend the language with a predicate A which, in the intended interpretation, 
holds of the powers of two, 2 Z . Adopting the obvious conventions and abbreviations, 
extend the theory by adding the following axioms: 

• Vx (A(x) -» x > 0) 

• Vx,y (A(x) -» (A(y) «-» A{xy))) 

• A{2) A Va; (1 < x < 2 -» -<A(x)) 

• Vx (x > -> 3y (A(y) Ay < x < 2y)) 

The first two imply that the A picks out a multiplicative subgroup of the positive 
elements. In [5], van den Dries showed that the resulting theory admits quantifier 
elimination in an expanded language. As a result, it is complete and decidable, 
and, in particular, axiomatizes the real numbers with a predicate for the powers of 
two. 

The theory we have just described includes not only the theory of real closed 
fields, but also, via an interpretation of integers as exponents, Presburger arith- 
metic. Thus, van den Dries's result is particularly interesting in that it subsumes 
two of the most important decidability results of the twentieth century. In recent 
years, this result has been extended in various directions (see, for example, |10l l7]). 

To establish quantifier-elimination, van den Dries gave a model-theoretic argu- 
ment. The proof does not provide an explicit procedure, nor does it provide a bound 
on the length of the resulting formula. Here, we present a proof that makes use of 
nested calls to a quantifier-elimination procedure for real closed fields, yielding a 
procedure that is primitive recursive but not elementary. In particular, it requires 
time 2o(n) *° Gliminate a single block of existential quantifiers, or even a single 
existential quantifier, where n is the length of the input formula and 2° denotes a 
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stack of k exponents. Thus, the best bound we can give on the time complexity of 
the full quantifier-elimination procedure involves 0(n) iterates of the stack-of-twos 
function. We leave it as an open question as to whether one can avoid such nest- 
ing and, say, obtain elementary bounds for the elimination of a single existential 
quantifier. 

In Sectional we describe the extension of the theory above that admits elimi- 
nation of quantifiers. Our method of eliminating an existential quantifier proceeds 
in two steps: first, we eliminate that quantifier in favor of a multiple existential 
quantifiers over powers of two (the number of which is bounded by the length of 
the original formula); then we successively eliminate each of these. The first step 
is described in Section [21 In Section we prove a number of lemmas that fill out 
the relationship between the powers of two and the underlying model of real closed 
fields in a model of the relevant theory; this contains the bulk of the syntactic and 
algebraic work. In Section we use these results to carry out the second step. 
Finally, in Section [SJ we show that our procedure satisfies the complexity bounds 
indicated above. 

We are grateful to Chris Miller for bringing van den Dries's result to our atten- 
tion, and for raising the issue of finding an explicit elimination procedure. We are 
also grateful to the anonymous referees for comments and corrections. 

2. The first step 

Expand the language of real closed fields to include a unary function A and a 
unary predicate D n for each natural number n > 1. Let T be the theory given by 
the axioms above together with the following: 

. D n (x)^3y (A(y)Ay n = x) 

• Vx (x < -> X(x) = 0) 

• Vx (x > -> A(X(x)) A X(x) < x < 2X(x)) 

In the standard interpretation, A maps negative real numbers to and rounds 
positive reals down to the nearest power of two, and D n holds of numbers of the 
form 2 l where i is an integer divisible by n. 1 Note that A and D\ are equivalent; 
we will treat them as the same symbol and use the two notations interchangeably. 
Our goal is to prove the following: 

Theorem 2.1. T admits quantifier- elimination. 

This is Theorem II of 5 . Henceforth, by "formula," we mean "formula in the 
language of T." We will use x to denote a sequence of variables Xq, xx, . . . , Xf.-i, 
and we will use notation like A(x) to denote A(xq) A A(x\) ... A A(xk-i). 

To eliminate quantifiers from any formula it suffices to be able to eliminate a 
single existential quantifier, i.e. transform a formula 3x ip, where tp is quantifier- 
free, to an equivalent quantifier-free formula. Since 3x (ip V ip) is equivalent to 
3x V 3x ip, we can always factor existential quantifiers through a disjunction. In 
particular, since any quantifier-free formula can be put in disjunctive normal form, 
it suffices to eliminate existential quantifiers from conjunctions of atomic formulas 
and their negations. Also, since 3x (ip A tp) is equivalent to 3a; tp A ip when x is 

^For parsimony, can be denned as 1 — 1 and A(x) by x > 0A\(x) = x. In the next section, we 
will see that the division symbol is another inessential addition to the language. But in contrast 
to q.e. for real closed fields, one can't eliminate — in terms of +; for example, the quantifier-free 
formula A(x — y), if replaced by 3z (z + y = x A A(z)), would have no quantifier-free equivalent. 
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not free in ip, we can factor out any formulas that do not involve x. Furthermore, 
whenever we can prove Va; (9 V 77), 3x tp is equivalent to 3a; (tp A 9) V 3a; (tp A 77); so 
we can "split across cases" as necessary. We will use all of these facts freely below. 

In UJ|, van den Dries established quantifier elimination by demonstrating the 
following two facts: 

(1) Every model of T v , the universal fragment of T, has a "T-closure" ; in other 
words, every model M. of T v can be extended to a model of T which can 
be embedded, over ./Vf , into any other T-extension of M.. 

(2) If M is a proper substructure of M and both are models of T, there is some 
b e N - M such that M(b), the model of T v generated by M U {b}, can 
be embedded into an elementary extension of M. 

The novelty of this test, as compared to more common ones (see e.g. [121 ), lies 
in the prover's right to choose an appropriate b in the second clause (see also the 
discussion in [2]). This clause implies that any existential formula with parameters 
from M. that is true in the T-closure of M(b) is true in Ad; the test works because 
this clause can be iterated in a countable model to obtain a sequence of T-extensions 
Ad = Ado C Ad\ C Ad 2 ■ ■ ■ C Af that eventually picks up every element of Af, so 
any existential formula with parameters from Ad true in Af is true in Ad . On the 
syntactic side, this iteration translates to the simple observation that to eliminate a 
single existential quantifier from an otherwise quantifier-free formula, it suffices to 
eliminate additional existential quantifiers from an equivalent existential formula. 
Thus, our effective proof is based on the following two lemmas: 

Lemma 2.2. Every formula of the form 3w ip, with ip quantifier-free, is equivalent 
to a disjunction of formulas of the form 3x (A(x) A ip), with ip quantifier-free. 

Lemma 2.3. Every formula of the form 3x (A(x) A tp), with tp quantifier-free, is 
equivalent to a formula that is quantifier- free. 

The remainder of this section is devoted to proving the first of these two lemmas. 
The next lemma explains why the new existentially quantified variables are helpful. 

Lemma 2.4. Every existential formula is equivalent, inT, to an existential formula 
in which X does not occur and the predicates Di are applied only to variables. 

Proof. First, replace . . . Di(t) . . . by 3z (z = t A . . . Di(z) . . .). Then, iteratively 
simplify terms involving A, noting that ip(\(t)) is equivalent to 

(i < A ^(0)) V 3z (A(z) A z < t < 2z A ip(z)), 

and that the existential quantifier can be brought to the front. □ 

Thus to prove Lemma 12.21 we are reduced to showing that when ip is quantifier- 
free, A does not occur in tp, and the predicates Di occurring in ip are applied only 
to variables, the formula 3a; ip is equivalent to one of the form 3a; (A(x) A tp), where 
tp is quantifier-free. In general, 3a; 6{x) is equivalent to 

3a; > 9{x) V 9(0) V 3a; > 9(-x). 

Moreover, assuming x > 0, any subformula of the form Di(—x) is equivalent to 
falsity. So, across a disjunction, we are reduced to proving the claim for formulas 
of the form 3a? > ip{x), where ip satisfies the criteria above. 
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In T we can factor out the greatest power of two from any positive x, i.e. we can 
prove 

x > <-> 3y 3z (A(y) Al<z<2Ai = yz). 
Since we have 1<z<2«(z = 1V1<z<2), we can transform our formula into 
a disjunction of formulas of the form 

3y, z (A(y) Al < z<2Aip) 

where tp once again meets the criteria above, except that the predicates Dj are 
applied to expressions of the form yz. When 1 < z < 2, each Di(yz) is false, so we 
can rewrite the formula above as 

3y (A(y) A 9 ABzrj) 

where 9 is a conjunction of predicates of the form D n {y) and negations of such, 
and 3z rj is in the language of real closed fields. We can therefore replace 3z rj by 
a quantifier-free formula, using any q.e. procedure for real closed fields. 

3. Reasoning about powers of two 

Our goal in this section is to establish some general relationships between the 
powers of two in a model of our theory, T, and the underlying real closed field. 

Definition 3.1. Let if be a quantifier- free formula. We say if is simple in x if the 
following hold: 

(1) every equality or inequality occurring in if is either of the form p(x) = 
or q{x) > 0, where p{x), q(x) are polynomials in x; that is, they are of the 
form X)i<n s i x% where each Sj is a term that does not involve x. 

(2) for every atomic formula D n (t) occurring in if, either t does not contain x 
or t is of the form 2 r x for some integer r such that < r < n. 

The main goal of this section is to prove the following proposition: 

Proposition 3.2. Let if be any quantifier-free formula. Then there is a quantifier- 
free formula if' such that if' is simple in x and T proves A(x) — > (tp «-> if'). 

In semantic terms, this says the following: let M be any model of T, let M. C J\f 
be a model of T v , and let a; be a power of two in M. Then the structure of M.{x) is 
completely determined by the structure of M, the structure of A4(x) as an ordered 
ring, and the divisibility properties of the exponent of x. 

First, we need to note some easy facts about A and the predicates Di. 

Lemma 3.3. For any n, T proves 

< u < x < 2 n u A A{x) -> (x = 2A(w) V...Vx= 2 n A(u)). 

Lemma 3.4. For any n, T proves 

A(x) -> D n (x) V D n (2x) V ... V A l (2"~ 1 a;). 

Although we have not included the division symbol in the language of T, we can 
define the function r/s by making x/y = z equivalent to x = yz V [y = A z = 0). 
In the proof of Proposition ^. 21 it will be useful to act as though the division symbol 
is part of the language. The next few lemmas show that if 9 is any quantifier-free 
formula in the expanded language with division, there is a quantifier-free formula 
0' in the language without division such that T h <-> 0' . 
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Lemma 3.5. From the hypotheses < x and < y, T proves 
x\(y) < y\(x) -» \{x/y) = \{x)/2\(y) 

and 

x\(y) > y\(x) -» X{x/y) = X(x)/X(y). 

Proof. An easy calculation using the axioms for A shows that if x/y < X(x)/X(y), 
then X{x/y) = X(x)/2X(y); and otherwise, X(x/y) = X(x)/X(y). □ 

Lemma 3.6. If 9 is any quantifier-free formula involving the division symbol, there 
is a quantifier-free formula 9' in which the division symbol does not occur in the 
scope of X, such that T h 6 «-> 6' . 

Proof. This can be done by iterating the previous lemma. To measure the nesting 
of A's and division symbols, we define the "A-depth of the division symbol in t," 
A^(t), recursively, as follows: 

(1) A^(t) = if the division symbol does not occur in the scope of A in t; 

(2) if tis ti + t 2 , *i - t 2l h x i 2 , or t 1 /t 2 , then A"(i) = max^^i), A"(i 2 )}; 

(3) assuming the division symbol occurs in t, A^(X(t)) = A^(t) + 1. 

The previous lemma shows that, using a case disjunction over the possibilities for 
the signs of the numerator and denominator, we can eliminate one term t such that 
the A-depth of the division symbol in t is maximal, in favor of terms in which the A- 
depth of the division symbol is smaller. Lemma 13.61 follows . by a primary induction 
on this maximal depth, and a secondary induction on the number of terms of this 
depth. □ 

Lemma 3.7. T h A(x) A A(y) -> (D n (x/y) «-» \J l<n {D n {2 l x) A D n (Ty))). 

Proof. The right-to-left direction is easy: if z n = 2 l x and w n — 2 % y then (z/w) n — 
x/y. Proving the other direction is not much more difficult, using Lemma 13.41 □ 

Proposition 3.8. Let 9 be any quantifier- free formula involving division. Then 
there is a quantifier-free formula 9' that does not involve division, such that T h 
9^9'. 

Proof. Using Lemma \'3. 61 we can assume that division does not occur in the scope 
of any A in 9. So each atomic formula D n (t) can be put in the form D n (r/s), 
where the division symbol does not occur in r and s. Across a case disjunct, we 
can assume r and s are positive. Then D n (r/s) is equivalent to 

A(r/s) = r/s A D n (X(r/s)). 

Using Lemma T3.5I we can replace A(r/s) by either A(r)/A(s) or A(r)/2A(s). Then 
using Lemma l3~7l we can replace D n (X(r) / A(s)) or Z?„(A(r)/2A(s)) by a disjunction 
in which the division symbol does not occur. 

Once all divisibility symbols are removed from the A's and -D„'s, we can clear 
division from the remaining equalities and inequalities by multiplying through. □ 

It therefore suffices to prove Proposition ^ . 21 where ip' is a quantifier-free formula 
in the expanded language with the division symbol. The next few lemmas, then, 
make use of this expanded language. 
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Lemma 3.9. Letp(x) be the term J2i<n aixl ■ Then there is a sequence of quantifier- 
free formulas 9q, . . . , 9 m -i such that T proves 

A(x)Ap(x)>0^ \f 9 k , 

where each 9k is of one of the following forms: 

• X(p(x)) = 2 r \(ai)x l for some —l<r<n, 

• x e — 2 , x ( a *} or x e — 2 w ° J ^ , for some e.i, j, and r such that 1 < e < n, 
< i,j < n, and —(n + 1) < r < (n + 1). 

Proof. Argue in T. Using a disjunction on all possible cases, we can write p{x) as 
aix 1 +ajX J -\-p(x), where aix 1 is the largest summand and ajx J the least summand. 
Note that we have aiX 1 > 0, p(x) < (n + l)aix l , and 

p{x) — aiX 1 = ajX 3 + p(x) > najX 3 . 

We now distinguish between two cases, depending on whether p(x) is roughly the 
same size as a^x 1 or sufficiently smaller. 

In the first case, suppose we have p(x) > (aiX I )/2. This means we have 

(a l /2)x l < p{x) <(n+ l)a l x l < 2 n a t x l 

which yields 

{\{a l )/2)x l < X(p(x)) < 2 n X(a t )x\ 

This yields a disjunction of clauses of the first type, by Lemma ED 

In the second case, we have p(x) < {a,iX l )/2 and i ^ j. This means that ajX J 
must be negative and roughly comparable to OiX % in absolute value. That is, we 
have cij < and 

(ai/2)x l < cnx 1 — p(x) < —najX 3 , 

and so 

(oi/(-Oj))aJ i_j < 2n < 2™. 
Also, p(x) > implies natx 1 > —ajX J , which yields 

< 2-' 1 <l/n< { ai /{~a ))x l - J . 

Combining these, we have 2~" < (a,i/(— a,j))x l ~3 < 2". Using Lemma 13.51 and 
Lemma f3. 31 we get a disjunction of clauses of the second type. □ 

Lemma 3.10. In Lemma YS.iA if the assumption is changed to A(x) Ap(i) = 0, 
then in the conclusion we can assume that each 9k is of the second form. 

Proof. This is exactly as in the second case of the previous proof. □ 

Lemma 3.11. In the conclusion of Lemma \3.iA we may demand that each 9k is of 
the form \{p{x)) — sx l for some < i < n and some term s that does not contain 
x. 

Proof. The proof is by induction on the degree of x in p(x). The lemma is trivial 
if the degree of x in p(x) is 0. 

Now assume that the degree of x in p(x) is n and the lemma holds whenever the 
degree is less than n. By Lemma 1531 T proves a disjunction \J ai, with oi of one 
of those two forms. Each ai of the first form there is already as required. For each 
o~ i of the second form, consider a new term p{x), which is obtained by substituting 
the right-hand side of oi for x e in p{x) . Notice that the degree of x in p{x) is less 
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than n, and clearly T proves p(x) = p{x) Ap(x) > 0. By the inductive hypothesis 
we may replace o~i in \J ai by a disjunction V Ok which is of the required form. □ 

As was the case with the division symbol, we will iterately "squeeze" x's out 
from within the A symbols. Thus we introduce the following definitions: 

Definition 3.12. Let t be a term. Define the A-depth of x in t, A(x, t), recursively, 
as follows: 

(1) A(x,t) = if x is not in the scope of any A; 

(2) if t is t\-\-t2, t\ —t2, t\ x t2, or t\/t2, then A(x, t) = max{A(x, t\), A(x, ^2)}/ 

(3) if t is X(ti) and t\ contains x, then A(x, i) = A(x,t±) + 1. 

Definition 3.13. Let tp be a formula. Define the A-depth of x in tp by 

A(x,tp) = max{A(x,t) : t is a term that contains x and occurs in if}. 

Lemma 3.14. Let tp be any quantifier-free formula. Then there is a quantifier-free 
formula tp' such that T h A(x) — > (tp <-> tp'), and A(x, tp) = 0. 

Proof. The proof is by induction on the A-depth of x in tp. The lemma is trivial if 
A(x, tp) = 0. 

Assume A(x, tp) = n > and the lemma holds for every quantifier-free formula 
ip if A(x,ip) < n. Let X(po), \{p m -i) be all the different terms in tp with 
A(x,pi) = for all i < to. Across a case disjunction we can assume pi > for all 
i < m, since otherwise we can replace \{pi) by 0. By Lemma 13.61 we may assume 
that each pi is a polynomial in x. By Lemma 13.111 T proves tp <-» V( T ( A o~i), where 
each t\ is of the form f\ i<m \{pi{x)) — StX Ji , and each o~i is obtained by substituting 
SiX 3i for X(pi) in tp. Clearly T proves 

A(x) — > (\(pi(x)) = s t x n <-> A(si) A SiX j ' < pi(x) < 2s t x 3 '). 

Now since A(x, cr;) < n, we may apply the inductive hypothesis to each o~\ and the 
lemma is proved. □ 

Lemma 3.15. Let p be a term such that A{x,p) = 0. Then for any n there is a 
sequence of terms pk such that 

• T proves A(x) Ap>0 -► (D n (p) <-> V(p = Pk A D n (p k )j), 

• each pk is of the form sx l , where s is a term that does not contain x. 

Proof. Using Lemma l3.7l we can assume that p is a polynomial in x. We can replace 
D n {p) by p — X(p) A D n (X(p)), and then by Lemma 15. Ill across a disjunction we 
may replace \(j>) in each disjunct by a term of the form sx % , where s does not 
contain x. (Note that here no formulas like the 77 's in the previous lemma are 
needed.) □ 

Lemma 3.16. Let s be a term that does not contain x. Then for any n, i there is 
a sequence of formulas 9^ such that T proves 

A(x) -> (D n (sx l ) ^\j9 k ), 

and each 9k is of the form D n (2 w s) A D n (2 r x) for some < w,r < n. 

Proof. Since for each n, from the assumption A(x), T proves \J - <n D n (2 J x), it is 
straightforward to see that D n (sx l ) is equivalent to a disjunction each of whose 
disjuncts is of the specified form. □ 
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We are finally ready to prove Proposition 13. 21 

Proof. Given tp, first use Lemma 13.141 to eliminate x from the scope of any A. Then 
use Lemma l3.15l to ensure the atomic formulas involving D n are in the form D n (sa; 1 ), 
where s does not involve x. (This will require splitting across cases depending on 
whether p > or p < 0; in the latter case, D n (p) is equivalent to _L.) Finally use 
Lemma l3.1fil to ensure that all the atomic formulas involving D n are in the required 
form. □ 

We close with some consideration about the predicates D n which are analogous 
to considerations that arise in the context of quantifier-elimination for Presburger 
arithmetic. Remember that when n is a positive integer and s is a non-negative 
integer, D n (2 s x) asserts, in the intended interpretation, that x is equal to 2* for 
some integer t, and n divides s + t; in other words, the exponent of x is congruent to 
— s modulo n. Let 9 be any boolean combination of predicates of the form D n (2 s x), 
and let M be the least common multiple of these various n. Then in T one can 
show that there is an x satisfying 9 if and only if for any w satisfying A(w) we have 

9{w) V 9{2w) V 0(4u>) V ... V 9(2 M ~ 1 w), 

and, in particular, if and only if 

6>(1) V 6>(2) V 0(4) V ... V 6»(2 A/ - 1 ). 

Moreover, T can decide the truth or falsity of this last sentence. So we have: 

Lemma 3.17. With 9 and M as above, either T proves \/x ->9, or it proves 

Vu (0 < u -> 3x {u < x < 2 M u A 9)). 

4. Eliminating a quantifier over powers of two 

We are now ready to prove Lemma 12.31 which asserts that every formula of 
the form 3x (A(x) A tp), with tp quantifier- free, is equivalent to a formula that is 
quantifier-free. By Proposition ^. 21 we can assume that tp is simple, which is to say, 
x does not occur in the scope of any A and all divisibility assertions involving x are 
of the form D n (2 r x). Put tp in disjunctive normal form, replace negated equalities 
s ^ thy s < tVt < s, and replace negated inequalities s -/it by t < s\/t = s. Rewrite 
equalities and inequalities so that they are of the form p(x) = and q(x) > 0, 
where p{x) and q(x) are polynomials in x. Factoring existential quantifiers through 
disjunctions and getting rid of atomic formulas that do not depend on x, we are 
reduced to eliminating quantifiers of the form 3x (A(x)Atp) where tp is a conjunction 
of formulas of the following types: 

• p{x) = 0, where p is a polynomial, 

• q(x) > 0, where q is a polynomial, 

• D n (2 r x), where < r < n, or 

• -^D n (2 r x), where < r < n. 

Splitting across a disjunction, we can assume that in a conjunct of the fovmp(x) = 0, 
not all the coefficients are zero. By Lemma [3.101 we can assume that one of the 
conjuncts is of the form x e = s, where x does not occur in s. In that case, each 
conjunct D n (2 r x) is equivalent to D ne {2 re x e ) and hence D ne (2 re s) (and A(x), in 
particular, is equivalent to D e (s)). But now x no longer occurs in these formu- 
las, and so they can be brought outside the scope of the existential quantifier. 
The resulting existential formula is then essentially in the language of real closed 
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fields. By this last phrase we mean that it is of the form 3x a(x, to, ■ ■ ■ , ife-i), 
where a{x, yo, ■ ■ ■ , Vk-i) is in the language of real closed fields. Treating the terms 
to, . . . , tk-i in the expanded language as parameters, we can therefore replace it by 
an equivalent quantifier-free formula using any q.e. procedure for real closed fields. 
We are thus reduced to eliminating an existential quantifier of the form 

(1) 3x(/\q t (x)>0A9(x)) 

where 9 is a conjunction of formulas of the form D n (2 r x) and negations of such 
that includes at least the formula A(x). By Lemma Et. 171 either T proves that 9 is 
false for every x, or there is a natural number M such that T proves that for any 
u > 0, that 9 is satisfied by some x in the interval [u, 2 M u}. In the first case, T 
proves that formula is false. So we only have to worry about the second case. 
Fix such an M for the remainder of the discussion. 

Arguing in T, suppose formula Q holds. There are two possibilities: either 
there is a "large" interval on which f\qi(x) > 0, that is, an interval of the form 
[u, 2 M u]; or there is an x satisfying A(x) A/\ qi(x) > A9, but it is trapped between 
a u and a v with qi(u) = for some i, qj(v) — for some j, and v < 2 M u. Thus 
formula Q is equivalent to a disjunction of the formula 

3u > Vx (u < x < 2 M u -> f\ q t (x) > 0) 

and the formulas 

3u > (qj (u) = A 3x (u < x < 2 M u A f\ q t (x) > A 9{x)) 

for the various j. To see this, note that if formula Q holds, then by the previous 
discussion one of these formulas holds; and conversely, each of these formulas implies 
©■ 

The first of these formulas is essentially in the language of real closed fields, so 
these quantifiers can be eliminated. The second formula is equivalent to 

3u 1 ,u 2 (^4(wi) A 1 < u 2 < 2 A qj{uiu 2 ) = A 

3a; (tti < x < 2 M Ul A f\ q t {x) > A 6{x)). 

In this case, we can replace the inner existential quantifier over x by a disjunction, 
so that the entire formula is equivalent to a disjunction of formulas of the form 

3u 1 ,u 2 (A(ui) A 1 < u 2 < 2Aq j (u 1 u 2 ) = a/\^(ui) > A 9(ui)), 

where each qi{u\) is qi{2 r u\) for some r such that 1 < r < M, and similarly for 
9{u\). In particular, 9{u\) is a conjunction of formulas of the form Di{2 r u\), and 
their negations. 

Think of qj(uiu 2 ) as a polynomial in u\ with coefficients of the form su 2 , where s 
does not involve u\ or u 2 . By Lemma lH.lOl across a disjunction we may add a clause 
of the form u\ = 2 r \(sv%) / \{tu 2 n ) . Splitting on cases of the form 2 l < u\ < 2 l+1 
we can simplify each of these to an expression of the form u\ = 2 k X(s)/X(t) for 
some integer k. By Lemma |3.17l A(u\) A 9(u\) is equivalent to a formula 9 which 
now involves neither u\ nor u 2 , and hence can be brought outside the existential 
quantifier. We are thus reduced to eliminating quantifiers from a formula of the 
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form 

Bux,u 2 (l<u 2 <2A«i = 2 fe A(s)/A(i) A 2 l < u\ < 2 l+1 A 

qj{uxu 2 ) = A /\%(ni) = 0). 

We can eliminate these quantifiers using a q.e. procedure for real closed fields. 
This completes the proof of Lemma 12.31 and hence the proof of our main theorem, 
Theorem O 

Note that there is nothing special about the number 2 in our quantifier elimi- 
nation procedure: inspection of the proofs shows that the arguments go through 
unchanged for any real algebraic number a > 1. There are various ways to rep- 
resent the real algebraic numbers; for example, we can represent a by providing a 
polynomial, p(x), of which it is a root, together by a pair of rational numbers u 
and v isolating a from the other roots of p. In that case, we simply replace 2 by a 
new constant, c, in the axioms, and then add the following: 

• p(c) = 

• U < C < V 

As noted in this implies that the resulting theory is decidable. To see this, it 
suffices to see that any quantifier-free sentence (p is decidable. But we can do this 
using the decision procedure for real closed fields to iteratively compute the values 
of X(t) for any t involving the field operations and c, and then to determine the 
truth of terms of atomic formulas D n (t). (For explicit algorithms for computing 
with real algebraic numbers, see 0E]) 

5. Complexity analysis 

In this section we establish an upper bound on the complexity of our elimination 
procedure. 

For the theory of real closed fields, the best known upper bound for a quantifier- 
elimination procedure, in terms of the length of the input formula, is 2 2C ( ' . This 
is originally due to Collins [J, and, independently, Monk and Solovay. There are 
more precise bounds that depend on various parameters, such as the number of 
quantifier alternations and the degrees of the polynomials in the formula; see, for 
example, P3Gj- In particular, a block of existential quantifiers can be eliminated 
in time 2°W. The best lower bound for the full quantifier-elimination procedure is 
2°( n ', by Fischer and Rabin and applies even to just the additive fragment. The 
best upper bound for Presburger arithmetic is 2^ (see [HI EI) and is essentially 
sharp (see [21). 

Our bounds are far worse. Consider what our procedure does when given a 
formula with a single block of existential quantifiers: 

(1) First, replace this by a disjunction of formulas of the form 

By [A(y) A 3z (1< z < 2 A V)) 

where ip is in the language of real closed fields. 

(2) Then, use an elimination procedure for real closed fields to eliminate the 
quantifiers 3z . 

(3) Successively eliminate the innermost quantifier over a power of two, as 
follows: 
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(a) Call the relevant formula 3x (A(x) A ip). Apply Proposition 13.21 to 
reduce ip to a formula that is simple in x. 

(b) Put the new ip in disjunctive normal form, split across a disjunction, 
and remove atomic formulas that do not involve x, so that each formula 
is of the form 

3x (A(x) A f\pi(x) = OA f\qj(x) =OA0) 

where 9 is a conjunction of formulas of the form D n (2 r x) and negations 
of such, and in each disjunction where a disjunct of the form p(x) = 
occurs, we can assume p is not identically 0. 

(c) In each disjunct where a conjunct of the form p(x) = occurs, ap- 
ply Lemma 13.101 factor out the divisibility predicates, D n , and call a 
quantifier-elimination procedure for real closed fields. 

(d) In the remaining disjuncts, again, split across a disjunct; in one case, 
we call a quantifier-elimination procedure for real closed fields right 
away; in another, we expand a bounded existential quantifier into a 
disjunction, and then call the elimination procedure for real closed 
fields. 

Note that each iteration of the inner loop (3) requires at least one call to a 
quantifier-elimination procedure for real closed fields. Each of these calls can be 
carried out in time, say, 2 2 ° ( ' , where n is the length of the relevant formula. 
But then the next iteration of the loop will involve calls to the q.e. procedure for 
real closed fields on a formula that is potentially much longer. Thus, part (3) 
of the procedure requires an exponential stack of Cm twos, for some constant C, 
where m is the number of existential quantifiers over powers of two that need to be 
eliminated. 

In this section, we will confirm that such an upper bound can be obtained. To 
that end, it is sufficient to show that each pass of the inner loop is elementary, which 
is to say, it can be computed in time bounded by some fixed stack of exponents to 
the base 2. Note that after the first step, the number of quantifiers over powers of 
two is bounded by the length of the original formula (in fact, it is bounded by the 
number of A'a and A's in the original formula). Thus our procedure for eliminating 
a block of existential quantifiers runs in time 2^^, where n is the length of the 
original formula. 

We have been unable to eliminate this nesting of calls to a procedure for real 
closed fields. Efficient procedures for this latter theory avoid putting formulas in 
disjunctive normal form; for example, Collins's cylindrical algebraic decomposition 
procedure obtains a description of cells, depending on the coefficients, on which 
a set of polynomials have constant sign. In our setting, suppose we are given 
a formula 3x (A(x) A rj A 9), where rj contains only equalities and inequalities 
between polynomials, and 9 consists of divisibility conditions D n on the exponents 
of the x's. One might start by applying Collins's procedure to the polynomials 
occurring in rj. Then, given a description of the various cells (depending on the 
other parameters in the formula) , one needs to determine which cells contain points 
with coordinates that are powers of two, with exponents satisfying the requisite 
divisibility conditions. For one dimensional cells, our procedure relies on a simple 
disjunction: if the cell is large enough, one is guaranteed a solution, and otherwise 
one need only test a finite number of cases. For multidimensional cells, however, 
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the situation is more complex, and we do not sec how one can proceed except along 
the lines we have described above. It is thus an interesting question as to whether 
it is possible to obtain elementary bounds on a procedure for eliminating a single 
block of quantifiers. Given our failure to do so, we have not taken great pains to 
bound the number of exponents in the time bound on the inner loop, which would 
merely improve the constant bound implicit in the 0(n). 

For the discussion which follows, we define the length of a formula in the language 
of T to be the number of symbols in a reasonable formulation of the first-order 
language, with the following exception: we count the length of each symbol D n as n, 
rather than, say, one plus the binary logarithm of n. This choice is a pragmatic one 
in that it simplifies the analysis, and our results below then imply the corresponding 
results for the alternative definition of length. A more refined analysis might take 
both the length of the formula and a bound on the n's occurring in atomic formulas 
D n (t), but that does not seem to help much. 

It seems that the most delicate part of our task is showing that one can remove 
the division symbols, and "squeeze" variables ranging over powers of two out of 
the A symbols that are repeatedly introduced after the first step of the procedure, 
as required in step (3a). A priori, the procedures described in Section look as 
though they may be non-elementary. The next few lemmas show that this is not 
the case, by keeping careful track of the terms and formulas that need to be dealt 
with in the disjunctions. 

Lemma 5.1. Let t be a term with length I. Then there is a sequence of terms 
(tk : k < 2 l ) such that 

• T h Vfc<2< 1 = t k, 

• each tk is of the form r/s, where r and s are division-free terms, and 

• each tk has length at most 2 l . 

Proof. This can be proved by a straightforward induction on terms. Suppose t is 
of the form t\ + t^i where the length of t\ is \\ and the length of ti is 1%. By 
the inductive hypothesis, t is equal to one of at most 2 Zl 2' 2 < 2 l terms of the form 
T\l si+r^/ S2, where ri, s\, t2, and S2 are division-free, the length of r±/si is at most 
2' 1 , and the length of r 2 /s 2 is at most 2' 2 . But then the length of (r 1 S2 + r , 2S 1 )/s 1 s 2 
is at most 2(2 (l + 2' 2 ) <2 l , as required. 

If t is of the form A(ii), the claim follows from the inductive hypothesis, using 
Lemma \'6. 61 The other cases are similar. □ 

Lemma 5.2. Let if be a quantifier-free formula with length I. Then there is a 
quantifier-free division-free formula <p' with length 2°(" such that T h ip <-> p' . 

Proof. Enumerate all the different terms tg, . . . , i m _i in ip such that, for each i < m, 
Si is not a proper subterm of any term in p. Using the above lemma we can have 
a sequence of quantifier-free formulas ipj for j < 2 l each of which is obtained by 
replacing each tj with an appropriate term and therefore has length less than 2 l . 
Notice that for each <pj , as indicated in Lemma 13.61 there are some division- free 
atomic formulas that T used to derive the equalities in question. Clearly for each 
ifj there are less than I such atomic formulas, each of which has length less than 
2°^. Let <jj be the conjunction of them all. Let <p' be the formula Vj<2 ! (^i AtTj). 
The length of ip' is again bounded by 2°^ l \ and clearly T h tp <-> ip' . 
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Finally, we need to clear denominators from atomic formulas of the form r/s < 
t/u and r/s = t/u, and deal with atomic formulas of the form D n (r/s). The 
first two require a disjunction over cases, depending on whether denominators are 
positive, negative, or zero. The third set of atomic formulas is handled as described 
in the proofs of Lemma l3.7l 13.81 But each atomic formula occurring in a disjunct 
occurs to an atomic formula in the original formula, (p, and there are at most I 
of these. It is not hard to verify that the corresponding increase in length can be 
absorbed into the bound 2°">. □ 

Lemma 5.3. Let X(t) be a term, where the length oft is I and x does not occur in 
the scope of any division symbol in t. Then there is a sequence of terms (tk ■ k < 



• each tk is of the form sx 1 , where s is a term that does not contain x and 



Proof. For any polynomial p in x, clearly the number of possible values of A(p) of 
the form sx 1 , as in Lemma [3.111 depends on the degree n of x in p. So let f{n) 
denote the number of possible values of X(p). Observe that the value of X(p) is 
determined in the first case of Lemma 13.91 and when e = 1 in the second case. An 
calculation shows that there are no more than (n + l)(n + 2) possibilities in the 
first case, no more than 2n(2n+ 2) possibilities in the second case when e = 1, and 
no more than (n + l)(n — l)2(rt + 2) possibilities for all the remaining values of e. 
Hence we have the following equation: 

f{n) < (n + l)(n + 2) + 2n(2n + 2) + [n + l)(n - l)2(n + 2)f(n - 1). 

This can be simplified as f(n) < I0(n + 2) 3 f(n- 1). So we have f(n) < 2 8nlog ( n + 2 ). 
Let the length of p be I. Since n + 2 < I, we have f{n) < 2 8n ° g/ < 2 8 < 2log '. 

Now the proof proceeds by induction on the A-depth of x in t. If A(x,t) = 0, 
then t is a polynomial in a;. So we apply the above analysis to t and obtain no more 
than 2 8Hog ' possible values of A(i) which are all of the form sx 1 for some i < I. 
To compute the length of s, only note that each step of the iteration produces a 
polynomial whose length is no more than the square of the length of the previous 
polynomial. So we conclude that the length of s is no more than I 2 < 2 2 . 

Now suppose the lemma holds for each term s with A(x, s) < d, and suppose 
A(x,t) = d. Enumerate all the different terms A(so), ■ ■ ■ , A(s m _i) in t such that 
A(si) is not in the scope of any A for each i < m. Clearly A(x, Si) < n for each 
i < m. So by the inductive hypothesis there are less than 2 8 ^ losli possible values 
for each A(sj), where U is the length of s^. Since ^2 i<m h < I — 1, there are 
no more than 2 8 ( /-1 ) 2log ' possible values for t. Enumerate these possibilities as 
(tk ■ k < 2 8 ('~ 1 ) log/ ). In each tk, X(st) is replaced by a term of the form sx^ with 
j < l{. So tk is a polynomial in x whose degree in x is less than 1 — 2. So there 



are 2 8 C^— i) 2 i°s ^ . 2 8n °s' < 2 8/2log/ possible values for \(t). The length of each t k 



2 8 ' 2logi ) such that 

• TV- A{x) A t > -> V 



fe<2 Si 2 log! 



(A(i) = t k ), 



i < I, 

• each tk has length at most 2 2 . 




, so the length of each possible value of A(i) is bounded by 



□ 



Lemma 5.4. Let if be a quantifier-free formula with length I. Assume x does not 
occur in the scope of any division symbol in tp. Then there is a quantifier-free 
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formula ip' with length at most 2 2 ° l ' such that ip' is simple in x and T h A(x) — » 
<-> <£>')• 

Proof. First we claim there is a quantifier-free formula ^* with length at most 2 2 ° ( 
such that 

• TV- A(x) -> (<p <-> Lp*), 

• x does not occur in the scope of any division in ip* , 

• A(x,(p*) = 0. 

The proof is essentially the same as the proof of Lemma 15.21 using Lemma 15.31 
instead of Lemma 15. II 

Next we need to deal with atomic formulas of the form D n (p) in ip* , as shown 
in Lemma 13.151 So p is a polynomial in x whose degree in x is less than I. So there 
are at most 2 2 ° (!) possible values for \(p), the length of each of which is bounded 
by 2 2 . Soeach L>„(p) can be replaced by a disjunction whose length is less than 

2 2 ° ( ' . So the bound does not change. 

The increase in length in transforming ip* to a formula that is simple in x, as 
described in the proof of Lemma Ii3. 161 can be absorbed in the bound 2 2 ° ( ' . □ 

Lemma 5.5. Let ip be a quantifier-free formula with length I. Then there is a 
quantifier-free formula ip' with length at most 2g such that ip' is simple in x and 
T proves A(x) — ► (ip *-* ip') . 

Proof. Immediate by Lemma 15.21 and Lemma 15.41 □ 

Lemma 5.6. Each iteration of step 3 can be performed by an elementary function. 

Proof. It is straightforward to verify that the procedure implicit in Lemmas 15.51 
runs in time polynomial in its output. As a result, step 3(a) is elementary. Step 
3(b) is also clearly elementary. In fact, even though putting a formula in disjunctive 
normal form can result in exponentially many disjuncts, since each disjunct only 
involves atomic formulas from the original formula, the length of each disjunct is 
bounded in the length of the original formula. 

After step 3(a), the main increase therefore comes from the handling of the cases 
in (c) and (d), each of which is easily seen to be elementary. Case (c) involves a 
call to a quantifier-elimination procedure for real closed fields, with a V3 formula; 
case (d) involves calls to such a procedure, on existential formulas, across a number 
of disjuncts that is exponential in the length of the original formula. □ 

Theorem 5.7. There is a procedure for eliminating a single block of existential 
quantifiers in theory T in time ^Qny where I is the length of the original formula. 

Proof. Steps 1 and 2 are clearly elementary, after which the procedure performs an 
elementary operation for each quantifier over a power of two. As noted above, the 
number of such quantifiers can even be bounded by the number of predicates D n 
and A's in the original formula. □ 

Corollary 5.8. There is a procedure for eliminating quantifiers in theory T that 
runs in time bounded by 0(1) iterations of the stack- of-twos function, where I is the 
length of the original formula. 



Proof. Put the formula in prenex form, and iteratively apply the previous theorem 
to eliminate each block of quantifiers. □ 
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